MacOS WebDrivers version 51

Changed

• Update geckodriver to 0.32.2.
• Update ChromeDriver to 110.0.5481.77.

Linux WebDrivers version 51

Changed

• Update geckodriver to 0.32.2.
• Update ChromeDriver to 110.0.5481.77.

Authentication Helper version 0.2.0

Added

• Support for header based session management.

Fixed

• Code link in help.

Ajax Spider version 23.11.0

Changed

• Maintenance changes.
• Default number of threads to 2 * processor count.

Fixed

• Ensure default Allowed Resources are present with a new home directory (Issue 7719).

Automation Framework version 0.23.0

Changed

• Maintenance changes.

Fixed

• Added workaround for core bug which meant auth header env vars were not being applied.

Windows WebDrivers version 49

Changed

• Update geckodriver to 0.32.1.

MacOS WebDrivers version 50

Changed

• Update geckodriver to 0.32.1.

Linux WebDrivers version 50

Changed

• Update geckodriver to 0.32.1.

Common Library version 1.13.0

Changed

• Maintenance changes.

Added

• Add info URL.
• Constant for default number of threads.

Fixed

• Correctly parse cookie name when set-cookie header value doesn't end with semicolon.

Active scanner rules version 52

Changed

• The following scan rules now include example alert functionality for documentation generation purposes (Issue 6119 & 7100).
  • Buffer Overflow
  • Cloud Metadata
  • Code Injection
  • Path Traversal
  • Remote File Include
• The Path Traversal scan rule no longer populates the Other Info field with check information, as the Alert Reference now provides that detail.
• Maintenance changes.
• CVE-2012-1823 Remote Execution and Source Code Disclosure, and Heart Bleed scan rules now include Alert Tags for the applicable CVEs.

Fixed

• A false positive that could occur in the External Redirect scan rule if the payload was included in the redirect as a param or portion of the value.